package-hallucination

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Flag hallucinated, slopsquatted, and proxy-blocklisted malicious Go module names in your go.mod. go install, no registry signup needed.

Open-source AI package security gate that blocks slopsquatting, hallucinated dependencies, and typosquats before npm, pip, uv, or cargo install

Stop AI coding agents (Claude Code, Codex, Gemini CLI, Cursor) from installing npm/PyPI packages that don't exist — slopsquatting guard + MCP API for version-exact checks

Do the package names that LLMs invent actually get claimed? Code, data, and preprint for a registration census of AI-hallucinated packages (slopsquatting).

Investigating how often LLMs recommend non-existent packages, enabling slopsquatting supply-chain attacks.

Catch hallucinated / slopsquatted dependency names before you install them (PyPI + npm)

AI code reviewer that catches hallucinations in AI‑generated code: deprecated APIs, non‑existent packages, security anti‑patterns, and unnecessary complexity. Runs as CLI, VS Code extension, or in CI. Static analysis is free; AI‑powered checks cost pennies.